Client-ID Metadata Documents are the cleaner alternative to dynamic registration — no registration call at all, and portable across authorization servers. Our provider does not advertise support, so we could not use them.

What would settle it for you: check whether your authorization server's metadata advertises CIMD support. If it does, it removes the self-registration surface entirely, and the consent-screen risk in the note above shrinks with it.